Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e36322e302f32332d3234203d3e2037303138.roa
File: 33312e362e36322e302f32332d3234203d3e2037303138.roa (raw, json)
Hash identifier: QHZeghld5eQT8oDjwGUyZ7rFFm6tfyTb77ORMbFDXx0=
Subject key identifier: 41:F5:D7:AE:E5:AA:5B:F2:AD:0C:70:9B:2F:03:45:09:C0:FD:ED:C1
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 2BECEB6AE74277E9C008CDBCBA8776F5855DD373
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e36322e302f32332d3234203d3e2037303138.roa
Signing time: Wed 22 Mar 2023 15:29:48 +0000
ROA not before: Wed 22 Mar 2023 15:24:48 +0000
ROA not after: Wed 20 Mar 2024 15:29:48 +0000
asID: 7018
IP address blocks: 31.6.62.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ec:eb:6a:e7:42:77:e9:c0:08:cd:bc:ba:87:76:f5:85:5d:d3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:48 2023 GMT
Not After : Mar 20 15:29:48 2024 GMT
Subject: CN=41F5D7AEE5AA5BF2AD0C709B2F034509C0FDEDC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:ae:ce:1c:d0:40:70:d5:f9:c5:87:1d:75:
56:63:cd:38:c8:4e:fb:f5:56:31:a5:97:26:88:d2:
ed:9b:35:cc:f1:f1:af:0b:76:47:aa:b7:5f:d2:db:
d3:48:a9:d4:db:75:55:6b:e1:02:89:18:77:15:0a:
2e:25:33:c8:f0:bb:27:d4:3a:9b:c5:cb:a6:e0:45:
de:a5:0a:d5:8d:88:5a:63:dd:70:f9:3e:82:b5:88:
72:e0:55:d8:d1:cd:30:db:15:a8:c6:0e:38:1c:e7:
49:7a:9b:3a:8d:3d:ad:ee:a5:66:5a:6f:f1:e2:29:
7d:08:b3:47:95:f5:6b:75:1c:1a:7a:08:ee:39:df:
8b:a4:7b:6c:91:c2:41:15:e0:1f:96:34:e5:56:61:
37:ac:bd:6a:8b:9e:f5:a5:96:69:34:98:97:c2:e6:
51:b1:fb:55:19:3c:06:79:68:84:26:9f:ec:09:c7:
e6:56:54:d1:06:b8:eb:ab:38:47:52:36:63:b0:03:
af:e6:e4:b9:f4:56:a6:6b:5b:0d:e9:19:56:d9:de:
4c:4f:73:13:1d:51:36:13:ce:16:57:64:eb:c9:b9:
f5:7f:af:95:d6:70:dc:fa:6b:6f:be:75:f8:08:eb:
78:2d:8a:be:f1:96:a2:54:fd:50:22:50:b5:27:55:
0e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F5:D7:AE:E5:AA:5B:F2:AD:0C:70:9B:2F:03:45:09:C0:FD:ED:C1
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e36322e302f32332d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.62.0/23
Signature Algorithm: sha256WithRSAEncryption
40:c1:b5:7f:de:31:c6:d7:1a:bf:bd:84:3c:7f:4f:8e:06:28:
c8:46:bc:0d:c1:3a:38:1c:07:29:98:e0:5e:35:e4:c3:d6:62:
9a:3f:ae:73:14:37:26:cf:02:1a:67:48:4a:89:3d:56:1c:73:
e6:34:c2:8e:3b:9b:21:30:88:07:b1:3b:ca:5a:b8:85:e9:81:
ab:ce:9a:07:7b:60:48:ae:81:ab:a3:bb:47:a0:78:3f:4f:92:
67:2e:09:c4:ec:e8:54:44:4a:09:7b:09:3e:42:7f:b7:38:67:
a2:ac:12:d5:a6:20:2f:2d:10:1d:33:70:3a:b5:d2:13:93:c8:
08:55:81:15:1a:1c:b7:a2:51:38:a9:0b:57:78:0c:e5:c6:68:
3c:a6:af:c8:da:20:c7:96:1e:7f:4c:3a:1b:fb:62:d1:64:a0:
29:a0:e1:a5:1b:8f:f5:c1:4a:05:ad:85:2c:5e:61:5b:a1:00:
0a:84:5c:91:d4:8b:b6:99:2a:cf:43:75:58:e9:41:a2:d1:23:
aa:43:d8:85:85:cd:99:5d:51:fa:13:64:50:14:51:38:30:03:
50:49:51:00:be:48:22:fc:9e:d3:22:df:cc:7e:08:89:19:6e:
17:4f:22:8d:93:6e:44:9b:91:dd:cf:37:83:3e:a8:23:56:d2:
4f:5d:b4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org